Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: ITn0gob88Qc5JQk/c9vmBJSgO1feRDsA5XYuvy/ECas=
Subject key identifier: E0:08:92:74:C0:3B:AA:16:AC:37:E8:4C:1E:9A:7A:77:99:35:4E:9A
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019F935B8BBDDAF33009E2914B91CE955F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0CA8
Signing time: Fri 24 Jul 2026 09:01:17 +0000
Manifest this update: Fri 24 Jul 2026 09:01:17 +0000
Manifest next update: Sat 25 Jul 2026 09:01:17 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: vqHIcGyc9mPtdvAY99zxlJnSgpMXQY6jvfWlXZz/qPg=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:8b:bd:da:f3:30:09:e2:91:4b:91:ce:95:5f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jul 24 09:01:17 2026 GMT
Not After : Jul 25 09:01:17 2026 GMT
Subject: CN=e0089274c03baa16ac37e84c1e9a7a7799354e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:ce:d3:f9:80:ad:6c:7c:f5:a4:da:f3:35:
e5:6f:98:f9:e6:97:52:67:2a:e1:d0:d3:b4:16:2f:
07:e5:5b:11:94:00:0d:55:76:f6:20:c6:a4:2a:c7:
5b:03:42:be:0d:5a:dc:57:f1:2d:5c:94:59:1d:04:
1a:eb:ef:8f:2e:ce:d3:e6:b7:4d:ec:60:1d:bf:dd:
a6:f0:42:de:53:70:c7:bb:0c:df:0f:22:ba:29:25:
e9:8b:cf:44:9b:06:c1:d0:bf:a0:17:11:08:c1:ea:
d6:24:71:be:52:9e:08:7a:f9:e2:ea:b4:45:71:78:
74:0f:21:a8:d8:b6:91:cc:58:61:24:50:eb:29:b3:
57:68:42:3f:e6:9f:94:6a:5d:d2:1f:77:0b:04:ff:
fa:cc:96:c6:3f:2f:40:fa:06:41:94:bd:34:52:43:
bf:c5:de:d1:70:28:16:24:01:d3:ce:cf:ab:62:82:
6d:49:11:f5:69:47:b4:a4:d2:9f:13:06:24:f3:e5:
2f:c4:ac:9f:40:68:21:58:d6:bd:d8:2d:fc:9c:f6:
87:a8:5b:30:a4:bf:de:5d:4d:d5:c6:06:30:f0:eb:
1a:a9:19:d1:6b:22:7b:a2:b6:92:ba:c8:67:21:6c:
37:ed:b8:ac:97:4b:3e:9a:ba:e9:62:23:32:09:3a:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:08:92:74:C0:3B:AA:16:AC:37:E8:4C:1E:9A:7A:77:99:35:4E:9A
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0b:3c:71:e9:3d:fe:a9:b6:a6:1a:f6:4e:20:fd:be:24:b0:
1f:a9:09:cf:f3:39:49:8c:a4:05:53:e4:e3:32:73:49:e4:fe:
89:36:05:2b:38:af:c0:63:44:e8:69:6a:4e:a5:45:1d:e1:ba:
06:19:e0:b6:72:07:33:8b:40:47:46:63:2e:ef:a5:f3:26:17:
22:a9:16:e3:4a:1d:34:18:a0:9f:29:27:f6:bf:20:f8:76:be:
f9:2b:a7:78:a5:21:fb:fa:20:9a:72:e4:30:ff:c7:ba:7a:78:
ca:2f:15:a4:61:10:ad:c9:cf:6b:59:0a:f1:2b:6c:96:62:1f:
0d:61:ec:de:b5:a4:01:43:fe:62:95:a7:28:f1:9d:9c:e7:12:
9f:c4:5f:c9:cd:bb:a5:46:09:02:1d:f3:b7:cf:29:00:c6:fc:
26:49:3b:f7:89:db:77:68:ad:42:d7:f0:65:29:ac:0a:c5:e2:
d0:a6:7b:17:a1:b2:96:1c:a7:b5:63:f7:35:9a:a3:45:8f:a0:
c5:1d:91:0e:ac:35:63:7c:39:45:c4:8f:71:12:eb:c6:34:79:
f2:b1:46:a6:49:83:32:f7:e1:d6:c8:a9:60:5e:f3:65:da:c8:
d4:cd:62:af:26:5e:48:ca:a7:85:09:36:fe:0c:da:81:c2:dc:
ba:50:f4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:00:58 2026 by rpki-client